In an agentless DSSO (Desktop Single Sign-on) scenario Okta is the one decrypting the Kerberos ticket, finds then the user name, authenticates the user and passes back a session to the browser.
Solution: The statement is valid, but Okta is not the one doing decryption - the browser is doing that
Suggested Answer: B
Get Premium Okta Certified Administrator Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
CA
Carin
11 months ago
Sounds right, but I’m still a bit confused about the whole process.
TI
Timothy
11 months ago
Nope, it’s definitely the browser doing that.
KE
Keneth
11 months ago
Wait, I thought Okta did the decryption?
BE
Bernardo
12 months ago
Totally agree, that’s how it works!
GE
German
12 months ago
Actually, the browser handles the decryption, not Okta.
AD
Adrianna
12 months ago
I definitely recall that the browser is involved in the decryption process, but I can't remember the exact details of how Okta fits into that.
WI
Willodean
1 year ago
I feel like I might have mixed up who decrypts the ticket in the agentless scenario. Was it Okta or the browser?
NO
Norah
1 year ago
I think I came across a similar question about how authentication flows work with Okta and Kerberos, and it was clear that the browser does the decryption.
AL
Alyce
1 year ago
I remember studying how the browser handles the Kerberos ticket, but I'm not entirely sure if Okta plays a role in decryption.
SH
Shawnda
1 year ago
This is a tricky one. The statement and the solution seem to be contradicting each other. I'll need to think through the DSSO process step-by-step to figure out where Okta's role is in relation to the Kerberos ticket decryption. I'll mark this one as a review and come back to it.
TO
Tora
1 year ago
Okay, I think I've got this. The statement is saying that Okta is handling the authentication process, but the browser is actually doing the decryption of the Kerberos ticket. So the solution, which says Okta is not the one doing the decryption, is correct. I'll go with option B.
LA
Latosha
1 year ago
Hmm, I'm a bit confused here. The statement mentions that Okta is the one decrypting the Kerberos ticket, but the solution says the browser is doing that. I'll need to re-read this carefully to make sure I understand the correct flow.
TO
Tonette
1 year ago
This question seems pretty straightforward. I think the key is to understand the role of Okta in the DSSO scenario. Since the statement says Okta is the one decrypting the Kerberos ticket, I'll go with option A.
AL
Alesia
1 year ago
Ah, I see what they're getting at. The browser is the one decrypting the ticket, not Okta. Gotta love these tricky questions.
NA
Nana
1 year ago
Yes
SY
Sylvie
1 year ago
No
FR
Franklyn
1 year ago
Yes
AN
Antonio
2 years ago
Haha, the browser decrypting the Kerberos ticket? That's like asking a toddler to hack the Pentagon!
KR
Kristeen
1 year ago
No
CH
Chau
1 year ago
A
YO
Yoko
2 years ago
I think the statement is valid because Okta is responsible for authenticating the user and passing back a session to the browser.
NA
Naomi
2 years ago
The browser handling the decryption makes sense, but I'm not 100% sure. I'll have to double-check that.
PA
Paris
1 year ago
I agree, the browser decrypts the Kerberos ticket in an agentless DSSO scenario
TY
Tyisha
1 year ago
I think it's actually the browser that handles the decryption
LE
Leana
1 year ago
No
LE
Lenna
2 years ago
Yes
KA
Kasandra
2 years ago
B) No
JA
Jade
2 years ago
Hmm, I thought Okta was the one doing the decryption. This is a tricky one.
YO
Yoko
2 years ago
A) Yes